ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 275/275 feeds/APIs · 469/469 docs · 8/9 advisories · checked 02:38 UTC Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV
998Microsoft CVEsreleased Tue 8 Sep 132Critical105 need an update · 27 fixed service-side 2Exploited in the wild
0Publicly disclosed
2In CISA KEV
249Revised since release

Act first · September 2026

Exploited, KEV-listed, or publicly disclosed
CVE-2026-81963ImportantExploitedCISA KEV · due 22 SepEoPLocal
Windows Update Stack Elevation of Privilege Vulnerability
CVSS 7.8 KB5122871KB5122880KB5124008+1
CVSS 7.8 KB5122876KB5122878KB5122882+3
Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
CVSS 9.8 · EPSS 1.0% KB5122871KB5122876KB5122882+3
CVSS 8.8 · EPSS 0.8% KB5122871KB5122876KB5122878+7
CVSS 9.0 · EPSS 0.7% No KB listed
Showing 3 of 154All critical

CVEs · September 2026

93 matches in Windows · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-83501 Windows Virtualization-Based Security (VBS) Information Disclosure VulnerabilityWindows Virtualization-Based Security (VBS) Enclave Critical 5.50.4%Information DisclosureLocal
KB5122871KB5122880+2
CVE-2026-57098 Microsoft Remote Desktop App for Windows Information Disclosure VulnerabilityWindows RDP Client Important 7.50.6%Information DisclosureNetwork
—
CVE-2026-69443 Windows Device Health Attestation (DHA) Information Disclosure VulnerabilityWindows Device Health Attestation (DHA) Important 7.51.0%Information DisclosureNetwork
KB5122871KB5122876+1
CVE-2026-70579 Windows Mobile Broadband Information Disclosure VulnerabilityWindows Mobile Broadband Important 7.51.0%Information DisclosureNetwork
KB5122878KB5122880+2
CVE-2026-70587 Windows Remote Desktop Protocol Information Disclosure VulnerabilityWindows Remote Desktop Protocol Important 7.51.0%Information DisclosureNetwork
KB5122871KB5122876+8
CVE-2026-71330 Windows Services for NFS ONCRPC XDR Driver Information Disclosure VulnerabilityWindows Services for NFS ONCRPC XDR Driver Important 7.51.0%Information DisclosureNetwork
KB5122871KB5122876+8
CVE-2026-72932 Windows Message Queuing Queue Manager Information Disclosure VulnerabilityWindows Message Queuing Queue Manager Important 7.51.0%Information DisclosureNetwork
KB5122871KB5122876+8
CVE-2026-72989 Windows Failover Cluster Information Disclosure VulnerabilityWindows Failover Cluster Important 7.51.0%Information DisclosureNetwork
KB5122871KB5122876+1
CVE-2026-69267 Windows Connected User Experiences and Telemetry Information Disclosure VulnerabilityWindows Connected User Experiences and Telemetry Important 6.50.4%Information DisclosureLocal Revised 5 Oct
KB5122871KB5122876+5
CVE-2026-69297 Windows DHCP Server Information Disclosure VulnerabilityWindows DHCP Server Important 6.50.8%Information DisclosureNetwork
KB5122871KB5122876+4
CVE-2026-69395 Active Directory Certificate Services (AD CS) Information Disclosure VulnerabilityActive Directory Certificate Services (AD CS) Important 6.51.0%Information DisclosureNetwork
KB5122871KB5122876+4
CVE-2026-70019 Windows Compressed Folder Information Disclosure VulnerabilityWindows Compressed Folder Important 6.51.0%Information DisclosureNetwork
KB5122871KB5122880+2
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 11 Nov 02:38 UTC · 275 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.